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To help reduce the disk footprint of customized OS images, we are looking to provide a way for loT 
OEMs to remove a curated set of OS packages at manufacturing on loT Enterprise LTSC vNext. 


Please note this is prerelease work and being shared under our existing NDA. The list of packages is not 
finalized yet. We may add or remove packages from this list. Your feedback on the removable list and 
validation of your workloads will help our team build out the final list before RTM. 


1. Prerequisites 


1.1 Try other techniques first 


There are various other existing methods to reduce disk footprint. 


Please visit https://aka.ms/loTEnterpriselmageOptimization for details. If these methods are 


appropriate to your needs, you may combine them with the package removal method described in the 
following sections. 


1.2 Access IoT Enterprise LTSC prerelease media 


Obtain the loT Enterprise LTSC pre-release media from your Microsoft Collaborate portal: 


e Choose the “Client | BLD | Weekly | 20257 All Editions EN-US Only” package. 
e Download the “20257.1.201106-1554.fe_release CLIENT ENTERPRISES OEM_x64FRE_en- 
us.iso”. 


Please note that the package removal is supported only on the Windows 10 loT Enterprise LTSC edition. 


1.3 Access Powershell script: RemoveOnloTEnterpriseS.PS1 


Make sure you have access to the script in the “RemovablePackagesOnloTEnterpriseLTSC” package you 
downloaded from Microsoft Collaborate. 


2. Supported Removable Packages 


2.1 Query Supported Units of Removable Packages 


You can use "-List" command to enumerate all supported removal units of packages along with their 
descriptions. 
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PS> .\RemoveOnIoTEnterpriseS.ps1 -List 


Name 


Audio 
Biometrics 
BootEnvironment_Dvd 


Packages 


{Microsoft-Windows-3DAudio-HrtfData, Microsoft-OneCore-Multimedia-Acx} 
{Microsoft-Windows-BioEnrollment-UX, Microsoft-OneCore-Biometrics-Fingert 
{Microsoft-Windows -BootEnvironment -Dvd} 


Containers_OptionalFeature DisposableClientVM {Containers-OptionalFeature-DisposableClientVM} 
Defender_AM Default_Definitions_OptionalWrapper {Windows -Defender-AM-Default-Definitions-OptionalWrapper} 


DesktopTools 

DestopShell 

DevDiagnosticsTools 
DirectoryServices_ADAM Client 
FileSharingSyncing 
Fonts_DesktopFonts_NonLeanSupplement 
HVSI 

Hyper_V_ClientEdition 
Identity_Foundation 

IIs 


{Microsoft-Windows-win32calc, Microsoft-Windows-ShellOptions, Microsoft-l 
{Microsoft-Windows-DesktopFileExplorer, Microsoft-OneCore-WWA, Microsoft- 
{Microsoft-Windows-SDKTools } 
{Microsoft-Windows-DirectoryServices-ADAM-Client} 
{Microsoft-Windows-EnterpriseClientSync-Host, Microsoft-Windows-NFS-Clier 
{Microsoft-OneCore-Fonts -DesktopFonts -NonLeanSupplement} 

{Microsoft -Windows-HVSI} 

{Microsoft-Hyper-V-ClientEdition, Microsoft-Windows-PAW-Feature} 
{Microsoft-Windows - Identity -Foundation} 
{Microsoft-Windows-IIS-WebServer, Microsoft-Windows-IIS-WebServer-AddOn, 


LanguageFeatures_WordBreaking_Common_legacy {LanguageFeatures -WordBreaking-Common- legacy} 


Legacy_Components_OC 
Lxss_WithGraphics_OptionalWrapper 
MiscNetworking 
MultiPoint_Connector 
OneCore_Containers_Opt 
OneCore_SD 

PEAuth_OneCore 

Printing 

ProjFS_OptionalFeature 
RemoteDesktopServices_ Collaboration 
ScreenSavers 

SensorDataService 
SettingsAndAdminUX 
UsbConnectorManager 
UserDeviceRegistration 
Virtualization 

WalletService 

WinOcr 


{Microsoft-Windows-Legacy-Components-OC} 
{Microsoft-Windows-Lxss-WithGraphics-OptionalWrapper} 
{Microsoft-OneCore-Miracast-Transmitter, Microsoft-Windows -DataCenterBric 
{Microsoft-Windows-MultiPoint-Connector} 
{Microsoft-Windows-OneCore-Containers-Opt} 

{Microsoft-OneCore-SD} 

{Microsoft-Windows-PEAuth-OneCore} 

{Microsoft-Windows-Printer-Drivers, Microsoft -Windows-Printing-Foundatior 
{Microsoft-Windows-ProjFS-OptionalFeature} 
{Microsoft-OneCore-RemoteDesktopServices-Collaboration} 
{Microsoft-Windows-Shell-Wallpaper-Common, Microsoft-Windows-ScreenSavers 
{Microsoft-Windows-SensorDataService} 
{Microsoft-OneCore-SystemSettings-NetworkMobileHandlers, Microsoft-Windov 
{Microsoft-OneCore-Connectivity-UsbConnectorManager, Microsoft-OneCore-Cc 
{Microsoft-Windows-UserDeviceRegistration} 
{Microsoft-Windows-HyperV-OptionalFeature-HypervisorPlatform-Disabled, Mi 
{Microsoft-OneCore-WalletService} 

{Microsoft-Windows-WinOcr} 


The description column may be invisible because the console is not wide enough. You can run the 
following query to see the descriptions. 


PS> .\RemoveOnIoTEnterpriseS.ps1 -List | ft -Wrap -Property Name,Description 


Name 


Audio 
Biometrics 


BootEnvironment_Dvd 
Containers_OptionalFeature_DisposableClientVM 
Defender_AM_Default_Definitions_OptionalWrapper 
DesktopTools 

DestopShell 

DevDiagnosticsTools 
DirectoryServices_ADAM Client 


FileSharingSyncing 


Fonts_DesktopFonts_NonLeanSupplement 
HVSI 


Hyper_V_ClientEdition 


Identity_Foundation 


Description 

Data files for Windows Sonic spatial audio format. 

ACX Audio Class Extension for WDF, based audio drivers. 

Windows Hello Setup UI. 

Biometric credential provider and sensor adaptor. 

DVD boot configuration. 

Windows Sandbox optional feature. 

Windows Defender engine and security signature files optional feature. 

Win32 Calculator. Calc.exe, Character Map. Snipping Tool. 

File Explorer system app. Windows Web App Host. Windows Search optional feature. 

SDK tools including regsvr32.exe, regini.exe and debugger engine. 

Active Directory Lightweight Directory Services optional feature. 

Active Directory Lightweight Directory Services | Active Directory Lightweight Directory Services_admin 
Work Folder client optional feature. 

NFS optional feature. 

Client for NFS | Administrative Tools. SMB1Protocol and SMB Direct optional features. 

SMB 1.0/CIFS Client | SMB 1.@/CIFS Server. 

Remote Direct Memory Access (RDMA) support for the SMB 3.x file sharing protocol. 
Automatically removes support for the legacy SMB 1.@/CIFS protocol when such support isn't actively need 
Additional Chinese, Japanese and Korean fonts. 

Defines the optional component for Windows Defender Application Guard. 

Microsoft Defender Application Guard | Container Server | 

Inherited Activation Virtual Device | Remote App Lifetime Manager | 

Microsoft NT Kernel Integration Virtual Device | Microsoft NT Kernel Integration VSC Driver 
Hyper-V and Guarded Host optional features. 

Hyper-V Module for Windows PowerShell | Hyper-V Hypervisor | 

Hyper-V BASE | Hyper-V Services | Inherited Activation Virtual Device | 

RemoteFX Graphics Virtualization Host | Hyper-V Container Networking 

Hyper-V GUI Management Tools | Hyper-V GUI Management Tools 

Windows Identity Foundation 3.5 optional feature. 


To display each unit of removable packages vertically, use the following query. 
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PS> .\RemoveOnIoTEnterpriseS.psi -List | ft -Wrap -Property Name,@{Expression={$_.Packages -join "*r°n"};Name="Packages"} 


Name 
Audio 
Biometrics 


BootEnvironment_Dvd 


Containers_OptionalFeature_DisposableClientVM 
Defender_AM_Default_Definitions_OptionalWrapper 


DesktopTools 


DestopShell 


DevDiagnosticsTools 
DirectoryServices_ADAM Client 
FileSharingSyncing 


Fonts_DesktopFonts_NonLeanSupplement 
HVSI 
Hyper_V_ClientEdition 


Identity_Foundation 
IIs 


LanguageFeatures_WordBreaking Common_legacy 


Legacy_Components_OC 
Lxss_WithGraphics_OptionalWrapper 
MiscNetworking 


MultiPoint_Connector 
OneCore_Containers_Opt 
OneCore_SD 
PEAuth_OneCore 
Printing 


ProjFS_OptionalFeature 
RemoteDesktopServices_ Collaboration 
ScreenSavers 


SensorDataService 
SettingsAndAdminUX 


UsbConnectorManager 


UserDeviceRegistration 
Virtualization 


WalletService 
WinOcr 
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Packages 

Microsoft-Windows -3DAudio-HrtfData 
Microsoft-OneCore-Multimedia-Acx 
Microsoft-Windows-BioEnrollment-UX 
Microsoft-OneCore-Biometrics-Fingerprint 

Microsoft -Windows-BootEnvironment-Dvd 
Containers-OptionalFeature-DisposableClientVM 
Windows -Defender-AM-Default -Definitions-OptionalWrapper 
Microsoft-Windows-win32calc 
Microsoft-Windows-Shell0ptions 

Microsoft -Windows-SnippingTool 
Microsoft-Windows-DesktopFileExplorer 
Microsoft-OneCore-WwA 
Microsoft-Windows-SearchEngine-Client 

Microsoft -Windows-SDKTools 
Microsoft-Windows-DirectoryServices-ADAM-Client 
Microsoft-Windows-EnterpriseClientSync-Host 
Microsoft -Windows-NFS-ClientSKU 
Microsoft-Windows-SMB1 

Microsoft -Windows-SMBIDeprecation 
Microsoft-Windows-SmbDirect 
Microsoft-OneCore-Fonts-DesktopFonts-NonLeanSupplement 
Microsoft-Windows-HVSI 
Microsoft-Hyper-V-ClientEdition 
Microsoft-Windows-PAW-Feature 
Microsoft-Windows-Identity-Foundation 
Microsoft-Windows-IIS-WebServer 
Microsoft-Windows-IIS-WebServer-AddOn 

Microsoft -Windows-IIS-WebServer-AddOn-2 

Microsoft -Windows-MSMQ-Client 

LanguageFeatures -WordBreaking-Common-legacy 
Microsoft -Windows-Legacy-Components -OC 

Microsoft -Windows-Lxss-WithGraphics-OptionalWrapper 
Microsoft-OneCore-Miracast-Transmitter 

Microsoft -Windows-DataCenterBridging 
Microsoft-Windows-RDC 
Microsoft-Windows-Telnet-Client 
Microsoft-Windows-SimpleTCP 

Microsoft -Windows-MultiPoint-Connector 
Microsoft-Windows-OneCore-Containers-Opt 

Microsoft -OneCore-SD 
Microsoft-Windows-PEAuth-OneCore 
Microsoft-Windows-Printer-Drivers 

Microsoft -Windows-Printing-Foundation 
Microsoft-Windows-Printing-PremiumTools 
Microsoft-Windows-Printing-XPSServices 

Microsoft -Windows-Printing-PrintToPDFServices 
Microsoft-Windows-Printing-3D 
Microsoft-Windows-ProjFS-OptionalFeature 
Microsoft-OneCore-RemoteDesktopServices-Collaboration 
Microsoft-Windows-Shell-Wallpaper-Common 
Microsoft-Windows-ScreenSavers-3D 
Microsoft-Windows-SensorDataService 
Microsoft-OneCore-SystemSettings -NetworkMobileHandlers 
Microsoft-Windows-RecoveryDrive 
Microsoft-Windows-NetProfilesUX 
Microsoft-Windows-MobilePC-Client-Basic 
Microsoft-OneCore-SystemSettings-Devices 
Microsoft-Windows -ComputerManagerLauncher 

Microsoft -Windows-Defrag-UI 

Microsoft -OneCore-SystemSettings -UserAccount 
Microsoft-OneCore-Connectivity-UsbConnectorManager 
Microsoft-OneCore-Connectivity-UsbFunction 
Microsoft-Windows-UserDeviceRegistration 

Microsoft -Windows-HyperV-OptionalFeature-HypervisorPlatform-Disabled 
Microsoft-Windows-HyperV-OptionalFeature-VirtualMachinePlatform-Disabled 
Microsoft -Windows-AppManagement-UEV 
Microsoft-OneCore-WalletService 
Microsoft-Windows-WinOcr 


3. How To Remove Packages Offline 


Mount EnterpriseS WIM or VHD. 


PS> dism.exe /Mount-Image /ImageFile: 20257.1.201106- 
1554. fe release CLIENT ENTERPRISES OEM x64FRE_en-us.vhd /Index:1 /MountDir: offline 


Set Edition to loTEnterpriseS. 
PS> dism.exe /Image:offline /Set-Edition:IoTEnterprisesS 
Make other Offline Image Customizations such as uninstalling FoDs. 


Run RemoveOnloTEnterpriseS.PS1 in Offline Mode to remove a removal unit of your choice, and answer 
when prompted for confirmation to proceed. Use the removal unit name to indicate which set you want 
to remove. If you want to remove all supported removal units at once, use the command in section 4. 


PS> Set-ExecutionPolicy -ExecutionPolicy Unrestricted 

PS> $VerbosePreference = "Continue" 

PS> RemoveOnIoTEnterpriseS.ps1 -offlineImageFolderPath .\offline\ -RemoveUnit IIS 
The following packages will be removed: 

Microsoft-Windows-IIS-WebServer 

Microsoft-Windows-IIS-WebServer-AddOn 

Microsoft-Windows-IIS-WebServer-AddOn-2 

Microsoft -Windows-MSMQ-Client 

Are you sure you want to remove these packages? [Y|N]: 

Type ‘Y’ to proceed. ‘N’ to abort. 

Are you sure you want to remove these packages? [Y|N]: Y 

WARNING! !! 

Removing these packages is irreversible. There is no way to re-install them unless 


you re-image your Windows. 
Please type ‘remove’ to confirm you want to proceed to remove the packages 


Type 'remove' to confirm and start to remove the packages. Removal may take a while. 
Offline WinSxS cleanup 

PS> dism.exe /Image:offline /Cleanup-Image /StartComponentCleanup 
Commit and Unmount 


PS> dism.exe /unmount-image /MountDir:offline /Commit 
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4. How To Remove All Supported Packages At Once Offline 


Use '-List' command piped to foreach in which '-RemoveUnit' command with '-suppressPrompts' is 
executed. 


PS> RemoveOnIoTEnterpriseS.ps1 -List | foreach { 

>> .\RemoveOnIoTEnterpriseS.ps1 -offlineImageFolderPath .\offline\ -suppressPrompts - 
RemoveUnit $ _.Name 

>> } 


5. How To Remove Packages Online 


Install 20257.1.201106-1554.fe_release_CLIENT_ENTERPRISES_ OEM_x64FRE_en-us.iso via Setup or 
boot up VHD. 


At OOBE, enter Audit Mode. Please visit https://docs.microsoft.com/en-us/windows- 


hardware/manufacture/desktop/boot-windows-to-audit-mode-or-oobe to learn how to enter Audit 
Mode. 


Make other image customizations as needed. 
Set Edition to loTEnterpriseS. 
PS> dism -online /Set-Edition:IoTEnterpriseS /AcceptEula 


Run RemoveOnloTEnterpriseS.PS1 in online mode to remove a removal unit of your choice, and answer 
when prompted for confirmation to proceed. Use the removal unit name to indicate which set you want 
to remove. If you want to remove all supported removal units at once, use the command in section 6. 
PS> Set-ExecutionPolicy -ExecutionPolicy Unrestricted 

PS> $VerbosePreference = "Continue" 

PS> RemoveOnIoTEnterpriseS.ps1 -isOnline -RemoveUnit IIS 


Reboot. 
WinSxS cleanup. 
PS> dism.exe /Online /Cleanup-Image /StartComponentCleanup 


Test your application scenarios on this image. 


Capture Generalized Image via Sysprep. Please visit https://docs.microsoft.com/en-us/windows- 
hardware/manufacture/desktop/sysprep--generalize--a-windows-installation to learn to generalize from 


Audit Mode. 
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6. How To Remove All Supported Packages At Once Online 


Use '-List' command piped to foreach in which '-RemoveUnit' command with '-suppressPrompts' is 
executed. 


PS> RemoveOnIoTEnterpriseS.ps1 -List | foreach { 
>> .\RemoveOnIoTEnterpriseS.psi -isOnline -suppressPrompts -RemoveUnit $_.Name 
>> } 


7. Share Your Feedback 


Once you finish the validation of your scenarios and workloads, please share your feedback with 


win10iotsize@ microsoft.com. We are looking to understand: 


e Does the trimmed down OS image with these packages removed support your scenarios? 

e Do you have any suggested OS features/packages we should consider adding into this 
removable list? 

e What is your final OS image size after applying this removable package method together with 
other methods described in this doc: https://aka.ms/loTEnterpriselmageOptimization? 
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